Effective date: 30 August 2026

1. Who we are

Capital Market Partners A/S (“CMP”, “we”, “us” or “our”) is the data controller for the processing described in this policy.

Capital Market Partners A/S
CVR no. 33081731
Store Regnegade 12, 3.
1110 Copenhagen K
Denmark
Email: info@cmp.as

This policy explains how we process personal data when you visit cmp.as, contact us through the website, or subscribe to our newsletter.

2. Information you provide to us

Contact enquiries

Our website contact form is provided through WPForms. We require your name and email address so that we can identify and respond to your enquiry. You may also provide a phone number and a message, but these fields are optional.

We process this information to receive, assess and respond to your enquiry; communicate with you about the matter you have raised; take steps at your request before entering into a possible agreement; and protect the form and our website against spam, fraud and automated abuse.

Depending on the context, our legal basis is Article 6(1)(b) of the GDPR, where processing is necessary to take steps at your request before entering into an agreement, and/or Article 6(1)(f), based on our legitimate interests in responding to business enquiries and operating a secure consultancy website.

We generally retain a general enquiry for up to 12 months after our last substantive contact with you. If the enquiry develops into a client relationship, information needed for that relationship may become part of the relevant business records and be retained under the rules and retention periods applicable to that relationship. Information may also be retained for longer where this is necessary to comply with law or to establish, exercise or defend legal claims.

Newsletter

If you subscribe to CMP’s newsletter, we may collect your name and email address. We use this information to send you CMP’s newsletter and professional updates by email. The legal basis is your consent under Article 6(1)(a) of the GDPR.

You may withdraw your consent at any time by emailing info@cmp.as. Withdrawal does not affect the lawfulness of processing carried out before your consent was withdrawn.

We retain your subscription information while your subscription remains active. After withdrawal, we may retain a limited record where necessary to document and respect your withdrawal. CMP will not treat a contact enquiry as consent to receive a newsletter.

3. Form security and hCaptcha

The contact form uses technical anti-spam controls and hCaptcha to distinguish legitimate submissions from automated abuse.

hCaptcha may process technical and interaction information needed for this purpose, including IP address, browser and device information, time spent on the relevant page, and interaction signals such as mouse or keyboard activity.

We use hCaptcha based on our legitimate interest under Article 6(1)(f) of the GDPR in protecting our website, forms and recipients against spam, fraud and automated abuse.

hCaptcha is provided by Intuition Machines, Inc. More information is available in the hCaptcha Privacy Policy and hCaptcha Terms of Service.

4. Hosting, delivery and security providers

We use service providers to operate and protect the website and to deliver messages submitted through it. These include WP Engine for WordPress hosting and related infrastructure; Cloudflare for content delivery, security and bot management; CookieYes for website privacy choices; hCaptcha for contact-form protection; and Brevo in the tested mail-delivery path for contact-form notifications. The contact form itself is built using WPForms within our WordPress installation.

These providers may process technical information and, where relevant to their service, information contained in a form notification. We limit provider access to what is needed for the relevant service.

Some providers may use infrastructure outside the EU or EEA. Where personal data are transferred internationally, CMP requires an applicable lawful transfer mechanism and safeguards as required by data-protection law. We may also disclose information where required by law or where necessary to establish, exercise or defend legal claims.

5. Technical and security information

When you use the website, our hosting and security infrastructure may process information such as IP address; browser and device information; request date and time; requested page or resource; request headers and technical identifiers; and security, error and diagnostic information.

We use this information to deliver the website, maintain availability, detect abuse, troubleshoot errors and protect our systems. Where this information constitutes personal data, the legal basis is our legitimate interest under Article 6(1)(f) in operating a secure and reliable website.

Technical and security records are retained only for as long as reasonably necessary for security, abuse prevention, service operation and troubleshooting, subject to provider settings and applicable legal requirements.

6. Cookies and similar technologies

Cookies are small text files or similar technologies stored on or accessed from your device. Some technologies are necessary to provide and secure the website or to remember your privacy choices. Optional technologies are used only after the required consent has been obtained.

Necessary cookies

Cookie Provider Purpose Duration
__cf_bm Cloudflare Supports bot management and website security. Up to 1 hour
cf_clearance Cloudflare Records that a visitor passed a browser security challenge so repeat challenges can be avoided. Up to 1 year, depending on security settings
cookieyes-consent CookieYes Remembers your consent preferences so that they can be applied on later visits. Up to 12 months

Necessary cookies cannot be disabled through the preference centre because they are required for security or to remember your privacy choice. hCaptcha may use cookies or similar technical signals where necessary to protect the contact form against automated abuse.

Analytics

If you consent to the Analytics category, CMP uses Google Analytics 4, provided by Google, to understand how visitors use the public website. This includes measuring landing pages and page views, journeys between selected content and services, and interactions with relevant contact routes. The contact-form success event is configured to be recorded only when the website displays its confirmed success state.

Google Tag Manager is used to deliver CMP’s Analytics configuration. Neither Google Tag Manager nor Google Analytics is loaded or contacted before Analytics consent is granted. If you reject optional cookies or do not make a choice, Analytics remains blocked.

CMP’s Google Analytics configuration does not intentionally read or send names, email addresses, telephone numbers, message text or other contact-form values to Google Analytics.

The Google Analytics setting for user-level and event-level data retention is two months. This setting is separate from the browser-cookie durations shown below and does not affect Google’s standard aggregated reports.

Cookie Provider Purpose Duration
_ga Google Analytics Distinguishes browsers so that website usage and visitor statistics can be calculated. Up to 400 days in CMP’s current tested configuration; browsers may impose shorter limits.
_ga_SJXZQ4R8PP Google Analytics Maintains session state for CMP’s Google Analytics web stream. Up to 400 days in CMP’s current tested configuration; browsers may impose shorter limits.

CMP does not treat an Analytics-consent choice as consent to receive marketing communications.

7. Managing your cookie choices

CookieYes provides the website’s cookie banner and preference centre. You can accept, reject or customise optional cookies when the banner is shown. The Analytics category is not enabled before you grant consent.

You can change or withdraw your choice at any time through the Cookie preferences link in the website footer. Withdrawing consent does not affect processing that took place lawfully before withdrawal.

When Analytics consent is withdrawn, CMP’s current implementation stops sending new Analytics events, removes the first-party _ga Analytics cookies from cmp.as and clears pending Analytics attribution stored for the current browser session. Pages opened while Analytics remains rejected do not load Google Tag Manager or Google Analytics. The necessary cookieyes-consent cookie remains so that the website can remember your updated choice.

Withdrawal stops future optional measurement but does not erase information already transmitted before withdrawal. Rejecting optional cookies does not prevent access to the website’s ordinary content or use of the contact form.

8. Your rights

Depending on the circumstances, you may have the right to request access to your personal data; request correction of inaccurate or incomplete data; request deletion; request restriction of processing; object to processing based on legitimate interests; receive data you provided in a portable format where the legal conditions apply; and withdraw consent at any time where processing is based on consent.

These rights are subject to the conditions and limitations set out in applicable law. To exercise your rights, contact us at info@cmp.as. We may need to request information sufficient to verify your identity before acting on a request.

You may also lodge a complaint with the Danish Data Protection Agency, Datatilsynet. Information about complaints is available at www.datatilsynet.dk.

9. Security

We use appropriate technical and organisational measures intended to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

No website or transmission method can be guaranteed to be completely secure. Please avoid including confidential client information, sensitive personal data or unnecessary personal information in the free-text message field.

10. Third-party websites

The website may contain links to third-party websites. CMP is not responsible for the privacy practices or content of those websites. Please review the relevant third party’s own privacy information before providing personal data.

11. Changes to this policy

We may update this policy when our services, providers, website functionality or legal obligations change. The current version will be published on this page with its effective date. If a change materially affects an existing consent, we will request a new choice where required.

12. Contact

Capital Market Partners A/S
Store Regnegade 12, 3.
1110 Copenhagen K
Denmark
Email: info@cmp.as